last executing test programs: 1m22.104300443s ago: executing program 0 (id=66): syz_open_procfs(0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 1m18.360722563s ago: executing program 0 (id=75): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x8321f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb65260102030109021200010000000009"], 0x0) syz_usb_control_io$uac3(r4, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c1c}}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x4, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0x1}, @timestamp], 0x8) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1m14.918407929s ago: executing program 0 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1m13.337806057s ago: executing program 0 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104020006000000000000000000", @ANYRES32=0x0, @ANYBLOB="2825020000080000280012800c0001006d6163766c616e00180002800a0009000000000000000000080007000100000008000500", @ANYRES32=r1], 0x50}}, 0x800) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sync_file_range(r5, 0x9, 0xcc5, 0x1) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r9, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) 1m10.794600377s ago: executing program 0 (id=82): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x21c, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0e5}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfb}}, {0x14, 0x4f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m7.979885479s ago: executing program 0 (id=85): syz_open_procfs(0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 15.275100413s ago: executing program 2 (id=147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) syz_open_dev$loop(0x0, 0xf01c, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x9) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$EVIOCSABS20(r5, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800004, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 13.737328368s ago: executing program 3 (id=150): socket$nl_route(0x10, 0x3, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) ioprio_set$uid(0x3, 0x0, 0x0) tkill(r2, 0x7) 12.012984359s ago: executing program 2 (id=153): lsetxattr(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080)=@random={'security.', 'hashlimit\x00'}, 0x0, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000840)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000020756c2500000000002020207bff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000"], &(0x7f0000000380)='GPL\x00', 0x8, 0xd, &(0x7f0000000640)=""/13, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x183a1, r0, 0x0, &(0x7f00000008c0)=[r2], 0x0, 0x10, 0x80}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r3, 0x25, 0x2, @void}, 0x10) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc20100000000000950000000000000020ee51fbb64aeb1929611f7c1f40768feebc6e66cd10e54bf22b331676cea1488263d14e9e3cb7f7facf9082ee6f31db22010000007ee1168682e2f387dd12c85db0e7de530af0bde41fcdc84fbd75bdc287953491c2e39531c9ec65ef55d1707391af9217568bf5959ca6367a28fd9fc6979022d22c7ed344b1c15c4dacaae2a0b7f9b80f0806ab4dc6d68ef351ed3299e15b2f1e7742d10a888249ec8ea62ceb1e8766fb5b899ebbab4af07e9cd310257b2fce135a72b14558716f1c61e5cf5d545a14e7b07bbda58021371facac7f84d7b130b4b953be6f640740c6a22a63186b7a21d12e28"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="38080000d0ff0000000000000000000085100000f0ffffff170000004d5489b0bde3076864b93c27d76bac1660d49410a909d720b6c06c9e8e3508e81f2f1af2593cb853559c0a3c729f7d4857a1107908c68aacac39117aa02a28d21d578505f445dbc2", @ANYRES32=r4, @ANYBLOB="000000000000000066080000000000001800000000000000000000000000000195000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r5, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x3) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070920010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x240088d0}, 0x24000000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r8, 0xc0046d00, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x0, 0x0) mknodat(r9, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x2900, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r10, 0xd) connect$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 11.625429701s ago: executing program 4 (id=156): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) 11.523358701s ago: executing program 4 (id=157): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400", @ANYRES16=r2, @ANYBLOB="bbdf26bd7200ffd6fca420"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x1c, r4, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x3000c000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x9, 0x18}, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x56, 0x62, 0x69, 0x8, 0x5f9, 0xffff, 0xe6f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0xd, 0x20, 0xb, "", [{{0x9, 0x4, 0x68, 0x9, 0x0, 0x31, 0x94, 0xdc, 0x5}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 11.380687814s ago: executing program 3 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x4000050) 9.136985654s ago: executing program 1 (id=160): openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) readv(r4, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 8.788291271s ago: executing program 3 (id=161): openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2042, 0x19d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x10000839, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) readv(r6, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) 7.663475487s ago: executing program 1 (id=162): openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2042, 0x19d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x10000839, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) listen(0xffffffffffffffff, 0x6) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) 6.190331273s ago: executing program 1 (id=163): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.654847879s ago: executing program 4 (id=164): syz_open_procfs(0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) 5.614639794s ago: executing program 3 (id=165): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a01"], 0x188}}, 0x0) 5.49449653s ago: executing program 3 (id=166): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="bbdf26bd7200ffd6fca420"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x1c, r5, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x3000c000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x9, 0x18}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x56, 0x62, 0x69, 0x8, 0x5f9, 0xffff, 0xe6f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0xd, 0x20, 0xb, "", [{{0x9, 0x4, 0x68, 0x9, 0x0, 0x31, 0x94, 0xdc, 0x5}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 5.192430537s ago: executing program 2 (id=167): openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) 4.860795532s ago: executing program 1 (id=168): syz_open_procfs(0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) 3.806445976s ago: executing program 2 (id=169): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xb}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 3.600248031s ago: executing program 2 (id=170): unshare(0x400) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xfff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003680)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$getregset(0x4204, r2, 0x4, &(0x7f0000000040)={0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091117e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) 3.595891343s ago: executing program 4 (id=171): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.541841038s ago: executing program 1 (id=172): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010100}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="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", 0x3c6}, {&(0x7f0000002b40)="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", 0x14f}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x2, 0x3, @local}, 0x10, &(0x7f0000004d00)=[{&(0x7f0000003ac0)="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", 0x131}], 0x1}, 0x0) 3.420699582s ago: executing program 4 (id=173): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x8321f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r4, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c1c}}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x4, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @mss={0x2, 0x1}, @timestamp], 0x8) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 3.130167266s ago: executing program 1 (id=174): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff0000000000000300"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.497070019s ago: executing program 2 (id=175): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="bbdf26bd7200ffd6fca420"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x3000c000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x9, 0x18}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x56, 0x62, 0x69, 0x8, 0x5f9, 0xffff, 0xe6f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0xd, 0x20, 0xb, "", [{{0x9, 0x4, 0x68, 0x9, 0x0, 0x31, 0x94, 0xdc, 0x5}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 1.573823362s ago: executing program 3 (id=176): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_connect$uac3(0x5, 0xe8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201100300000008351214804000010203010902d60003010150ff080b0202010030010904000000010130000a2401092900070000000c240b0702010400a5e6925a48cc498381170050a9ceb7240307ffb006027f000000409f0d0000010109040100000102300009040101010102300009050109ff030cd8000a2525050000000404000904020000010230000904020101010230000e2402010301a101b8589f2cf0750924020100000005060e24020275000100020a9df8f80b1724010005000000d800020000000000000000090400030d2402020500090040c3f9ad1d0905820940008003030a2525d6900000070500"], &(0x7f0000000840)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x110, 0x0, 0xc, 0x3, 0x20, 0x3}, 0x27, &(0x7f0000000640)={0x5, 0xf, 0x27, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x40, 0xee1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x8, 0x1000}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x3, 0x6}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x28, &(0x7f0000000700)=ANY=[@ANYBLOB="2803d9047eb04d53e3e33222f8e0f931e6170cd73cadd9083ec235f33b553d78cc2bb981a6e29f9f"]}, {0xaa, &(0x7f0000000740)=@string={0xaa, 0x3, "0a02d37892c7af430bb8380373146c3b05ff8c968c1690489132d65d65732836ee1c037a0738a0314b97e43e495c0e6092944d59d685bdaf436fd686d5da2bcb782ec7a4f7b14989f724526aa93a92748f43e77410df8b4dcd227574e617e165b0f63116317d7450da611993455e66ae0e1992aa76a1ec90a05bc4f52cebb5e579f03ab21fef3e69f955a9c6a619b1b0c8f9e8ab1ccb23196ee2e30552582b8a74be2f6657ec913f"}}, {0x30, &(0x7f0000000800)=@string={0x30, 0x3, "71315addb3f6cbc9c8760a224355aed5e6634fb53cce5dc6bf21683910eb6a829edb6fb22fc4cc6ff53446d0a920"}}]}) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) write$snddsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d090408000103"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'gre0\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x7, 0x1, 0x1ff, 0x0, {{0x41, 0x4, 0x3, 0x0, 0x104, 0x65, 0x0, 0xad, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x3b, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x10}, {@multicast1, 0x200}, {@broadcast, 0x2000000}, {@broadcast, 0x8}, {@broadcast, 0x8}, {@multicast2, 0x5}, {@local, 0x5}]}, @timestamp_prespec={0x44, 0x4c, 0xe1, 0x3, 0x3, [{@remote, 0x1000}, {@broadcast, 0x7}, {@private=0xa010102, 0x10}, {@local, 0x1}, {@broadcast, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@empty, 0x3}, {@empty, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x3f, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@multicast1, 0x8}]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x6, 0x4, "12f1"}]}, @timestamp_addr={0x44, 0x44, 0x57, 0x1, 0x9, [{@remote, 0x6}, {@local, 0x8}, {@multicast2, 0x6}, {@loopback, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xfffffffe}, {@rand_addr=0x64010100, 0xfffffffa}, {@broadcast, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x8}]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x2, 0x4f8, 0x19c, 0x264, 0x0, 0x0, 0x34c, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000], 'macvlan0\x00', 'caif0\x00', {0xff}, {}, 0x8, 0x0, 0x2, 0x22}, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'pim6reg1\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xc8}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0xff0000ff], [], 'veth0_to_bond\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@empty, 0x0, 0x0, 0x10}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [0xff000000, 0xff000000, 0x0, 0xffffffff], [0xff, 0x0, 0xffffffff, 0xff], 'syzkaller1\x00', 'ipvlan0\x00', {}, {0xff}, 0x2c, 0x8, 0x4, 0x4}, 0x0, 0xa4, 0xe4}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e55e1ce7f055212ed44dfcfb28597e5737f560d3619569f7ef719fa49521"}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x554) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x4e22, 0x0, 'wrr\x00', 0xc, 0x400eeb4, 0x14}, 0x2c) syz_emit_ethernet(0x3e, 0x0, 0x0) 0s ago: executing program 4 (id=177): lsetxattr(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080)=@random={'security.', 'hashlimit\x00'}, 0x0, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000840)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000020756c2500000000002020207bff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000"], &(0x7f0000000380)='GPL\x00', 0x8, 0xd, &(0x7f0000000640)=""/13, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x183a1, r0, 0x0, &(0x7f00000008c0)=[r2], 0x0, 0x10, 0x80}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r3, 0x25, 0x2, @void}, 0x10) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc20100000000000950000000000000020ee51fbb64aeb1929611f7c1f40768feebc6e66cd10e54bf22b331676cea1488263d14e9e3cb7f7facf9082ee6f31db22010000007ee1168682e2f387dd12c85db0e7de530af0bde41fcdc84fbd75bdc287953491c2e39531c9ec65ef55d1707391af9217568bf5959ca6367a28fd9fc6979022d22c7ed344b1c15c4dacaae2a0b7f9b80f0806ab4dc6d68ef351ed3299e15b2f1e7742d10a888249ec8ea62ceb1e8766fb5b899ebbab4af07e9cd310257b2fce135a72b14558716f1c61e5cf5d545a14e7b07bbda58021371facac7f84d7b130b4b953be6f640740c6a22a63186b7a21d12e28"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="38080000d0ff0000000000000000000085100000f0ffffff170000004d5489b0bde3076864b93c27d76bac1660d49410a909d720b6c06c9e8e3508e81f2f1af2593cb853559c0a3c729f7d4857a1107908c68aacac39117aa02a28d21d578505f445dbc2", @ANYRES32=r4, @ANYBLOB="000000000000000066080000000000001800000000000000000000000000000195000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r5, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x3) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070920010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x240088d0}, 0x24000000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r8, 0xc0046d00, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x0, 0x0) mknodat(r9, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x2900, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r10, 0xd) connect$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 92.079826][ T10] cfg80211: failed to load regulatory.db [ 93.185509][ T5578] cgroup: Unknown subsys name 'net' [ 93.428373][ T5578] cgroup: Unknown subsys name 'cpuset' [ 93.501670][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.469018][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.470023][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.503522][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.522051][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.540441][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.549731][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.573787][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.574495][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.575121][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.575579][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.576455][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.592763][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.600902][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.606619][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.609018][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.621609][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.630919][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.632469][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.633118][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.634805][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.639624][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.643911][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.644551][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.644965][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.648309][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.648925][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.813149][ T5612] Bluetooth: hci0: command tx timeout [ 101.891135][ T5612] Bluetooth: hci4: command tx timeout [ 101.971136][ T5612] Bluetooth: hci1: command tx timeout [ 101.971250][ T5612] Bluetooth: hci3: command tx timeout [ 101.971327][ T5612] Bluetooth: hci2: command tx timeout [ 102.564013][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.565196][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.566040][ T5591] bridge_slave_0: entered allmulticast mode [ 102.568011][ T5591] bridge_slave_0: entered promiscuous mode [ 102.583497][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.583836][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.584377][ T5594] bridge_slave_0: entered allmulticast mode [ 102.609711][ T5594] bridge_slave_0: entered promiscuous mode [ 102.689227][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.689358][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.689556][ T5591] bridge_slave_1: entered allmulticast mode [ 102.699838][ T5591] bridge_slave_1: entered promiscuous mode [ 102.711243][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.712304][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.712777][ T5594] bridge_slave_1: entered allmulticast mode [ 102.728613][ T5594] bridge_slave_1: entered promiscuous mode [ 102.776859][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.776980][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.777106][ T5590] bridge_slave_0: entered allmulticast mode [ 102.778904][ T5590] bridge_slave_0: entered promiscuous mode [ 102.834644][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.834782][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.834901][ T5593] bridge_slave_0: entered allmulticast mode [ 102.836708][ T5593] bridge_slave_0: entered promiscuous mode [ 102.884410][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.884536][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.884711][ T5590] bridge_slave_1: entered allmulticast mode [ 102.887007][ T5590] bridge_slave_1: entered promiscuous mode [ 102.938265][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.938389][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.938551][ T5593] bridge_slave_1: entered allmulticast mode [ 102.940611][ T5593] bridge_slave_1: entered promiscuous mode [ 102.955576][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.955881][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.956409][ T5592] bridge_slave_0: entered allmulticast mode [ 102.965815][ T5592] bridge_slave_0: entered promiscuous mode [ 103.016040][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.020644][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.051490][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.051608][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.051736][ T5592] bridge_slave_1: entered allmulticast mode [ 103.053613][ T5592] bridge_slave_1: entered promiscuous mode [ 103.097396][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.100107][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.145520][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.193419][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.221991][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.265605][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.268929][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.301713][ T5591] team0: Port device team_slave_0 added [ 103.303996][ T5594] team0: Port device team_slave_0 added [ 103.330096][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.362916][ T5591] team0: Port device team_slave_1 added [ 103.366897][ T5594] team0: Port device team_slave_1 added [ 103.413482][ T5590] team0: Port device team_slave_0 added [ 103.448054][ T5593] team0: Port device team_slave_0 added [ 103.474083][ T5590] team0: Port device team_slave_1 added [ 103.510566][ T5593] team0: Port device team_slave_1 added [ 103.518487][ T5592] team0: Port device team_slave_0 added [ 103.537941][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.537954][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.537973][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.540303][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.540319][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.540347][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.635072][ T5592] team0: Port device team_slave_1 added [ 103.655483][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.655500][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.655534][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.658268][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.658282][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.658309][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.766677][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.766690][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.766709][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.826211][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.826224][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.826243][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.877843][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.877861][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.877889][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.889500][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.889546][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.889618][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.894547][ T5611] Bluetooth: hci0: command tx timeout [ 103.902899][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.902944][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.903032][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.972054][ T5611] Bluetooth: hci4: command tx timeout [ 104.051174][ T5611] Bluetooth: hci2: command tx timeout [ 104.051210][ T5611] Bluetooth: hci3: command tx timeout [ 104.051233][ T5611] Bluetooth: hci1: command tx timeout [ 104.390728][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.390741][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.390773][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.543403][ T5591] hsr_slave_0: entered promiscuous mode [ 104.544988][ T5591] hsr_slave_1: entered promiscuous mode [ 104.576409][ T5594] hsr_slave_0: entered promiscuous mode [ 104.577448][ T5594] hsr_slave_1: entered promiscuous mode [ 104.578299][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 104.578389][ T5594] Cannot create hsr debugfs directory [ 104.653808][ T5590] hsr_slave_0: entered promiscuous mode [ 104.654799][ T5590] hsr_slave_1: entered promiscuous mode [ 104.655481][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 104.655499][ T5590] Cannot create hsr debugfs directory [ 104.684169][ T5593] hsr_slave_0: entered promiscuous mode [ 104.685304][ T5593] hsr_slave_1: entered promiscuous mode [ 104.686007][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 104.686024][ T5593] Cannot create hsr debugfs directory [ 104.765269][ T5592] hsr_slave_0: entered promiscuous mode [ 104.767240][ T5592] hsr_slave_1: entered promiscuous mode [ 104.768619][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 104.768638][ T5592] Cannot create hsr debugfs directory [ 105.849815][ T5591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.886192][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.900515][ T5591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.936317][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.937991][ T5591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.972415][ T5612] Bluetooth: hci0: command tx timeout [ 105.992340][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.016599][ T5591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.046397][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.062728][ T5612] Bluetooth: hci4: command tx timeout [ 106.133449][ T5612] Bluetooth: hci2: command tx timeout [ 106.133483][ T5612] Bluetooth: hci1: command tx timeout [ 106.141851][ T5611] Bluetooth: hci3: command tx timeout [ 106.197888][ T5590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.226124][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.237176][ T5590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.265723][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.295541][ T5590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.326294][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.359599][ T5590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.388205][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.523251][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.555722][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.568918][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.594727][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.599463][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.649187][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.685051][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.715506][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.868755][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.925735][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.930917][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.978428][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.994607][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.036482][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.069976][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.106126][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.207556][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.356720][ T5592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.388085][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.409483][ T5592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.439183][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.456060][ T5592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.495472][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.517357][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.517759][ T5592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.555181][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.626619][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.627019][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.653989][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.741993][ T1434] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.742091][ T1434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.846931][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.889843][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.889978][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.924841][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.971569][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.971749][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.054373][ T5611] Bluetooth: hci0: command tx timeout [ 108.084044][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.136889][ T5611] Bluetooth: hci4: command tx timeout [ 108.182814][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.183047][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.189782][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.211875][ T5611] Bluetooth: hci3: command tx timeout [ 108.211976][ T5611] Bluetooth: hci1: command tx timeout [ 108.212040][ T5611] Bluetooth: hci2: command tx timeout [ 108.289697][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.289858][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.384376][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.456023][ T1434] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.456173][ T1434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.499103][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.554456][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.554628][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.737182][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.805034][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.805258][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.911493][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.911627][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.225741][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.773596][ T5591] veth0_vlan: entered promiscuous mode [ 109.883076][ T5591] veth1_vlan: entered promiscuous mode [ 109.984615][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.158266][ T5591] veth0_macvtap: entered promiscuous mode [ 110.222489][ T5591] veth1_macvtap: entered promiscuous mode [ 110.339140][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.370055][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.415763][ T5590] veth0_vlan: entered promiscuous mode [ 110.437715][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.488704][ T1002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.508532][ T1002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.527127][ T1002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.527992][ T5590] veth1_vlan: entered promiscuous mode [ 110.558700][ T1002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.678955][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.753014][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.086670][ T5593] veth0_vlan: entered promiscuous mode [ 111.201735][ T5593] veth1_vlan: entered promiscuous mode [ 111.206692][ T5590] veth0_macvtap: entered promiscuous mode [ 111.274347][ T5590] veth1_macvtap: entered promiscuous mode [ 111.292340][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.292367][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.412516][ T5594] veth0_vlan: entered promiscuous mode [ 111.433895][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.433919][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.470048][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.518138][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.547459][ T5594] veth1_vlan: entered promiscuous mode [ 111.575240][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.604829][ T5593] veth0_macvtap: entered promiscuous mode [ 111.624267][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.646645][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.656027][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.690480][ T5593] veth1_macvtap: entered promiscuous mode [ 111.733057][ T5592] veth0_vlan: entered promiscuous mode [ 111.930423][ T5592] veth1_vlan: entered promiscuous mode [ 111.962795][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.248995][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.260692][ T5594] veth0_macvtap: entered promiscuous mode [ 112.444842][ T5594] veth1_macvtap: entered promiscuous mode [ 112.448203][ T1169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.450259][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.450277][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.526802][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.555891][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.582338][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.650714][ T5789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.658484][ T5789] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.739095][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.756834][ T5789] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.869952][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.869973][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.908982][ T5789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.909103][ T5789] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.971904][ T5592] veth0_macvtap: entered promiscuous mode [ 113.001883][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.114755][ T5789] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.128834][ T5592] veth1_macvtap: entered promiscuous mode [ 113.178943][ T1434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.193847][ T1434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.218211][ T1434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.247719][ T1434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.282028][ T5789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.282129][ T5789] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.384273][ T5789] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.514411][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.532529][ T5789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.532655][ T5789] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.618017][ T5789] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.665169][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.780850][ T5789] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 113.788511][ T5789] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 113.812727][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.816832][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.818901][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.838604][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.877220][ T38] audit: type=1326 audit(1777645736.040:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 113.877399][ T38] audit: type=1326 audit(1777645736.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 113.877896][ T38] audit: type=1326 audit(1777645736.040:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 113.878049][ T38] audit: type=1326 audit(1777645736.040:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 113.878235][ T38] audit: type=1326 audit(1777645736.040:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 113.878518][ T38] audit: type=1326 audit(1777645736.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 113.878692][ T38] audit: type=1326 audit(1777645736.040:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 113.879053][ T38] audit: type=1326 audit(1777645736.040:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 114.083273][ T5789] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.325749][ T38] audit: type=1326 audit(1777645736.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 114.325808][ T38] audit: type=1326 audit(1777645736.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.1.2" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8277d3cdd9 code=0x7ffc0000 [ 114.609413][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.609435][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.691155][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.974090][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.999765][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.999789][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.489942][ T5803] m1Ie5ия: entered promiscuous mode [ 115.575722][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.643325][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.821054][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.921522][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.921541][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.928076][ T5806] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9'. [ 116.083376][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.083397][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.344305][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.344326][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.657422][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.657444][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.782642][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.874286][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.019134][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.147551][ T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 117.147582][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.147603][ T10] usb 2-1: Product: syz [ 117.147618][ T10] usb 2-1: Manufacturer: syz [ 117.147633][ T10] usb 2-1: SerialNumber: syz [ 117.358708][ T10] usb 2-1: config 0 descriptor?? [ 117.540773][ T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 002 [ 117.661703][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.900248][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.900285][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.378790][ T5812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.613630][ T5812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.738686][ T10] i2c i2c-1: failure reading functionality [ 118.954341][ T5829] Zero length message leads to an empty skb [ 119.027177][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.605431][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.689350][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 119.756695][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.022601][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.022661][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.351630][ T10] usb 2-1: USB disconnect, device number 2 [ 121.516618][ T5848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 121.960408][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.419045][ T13] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 124.186867][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 124.209972][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 124.210001][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.210021][ T31] usb 4-1: Product: syz [ 124.210035][ T31] usb 4-1: Manufacturer: syz [ 124.210048][ T31] usb 4-1: SerialNumber: syz [ 125.543778][ T31] usb 4-1: config 0 descriptor?? [ 125.606993][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 125.703447][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 126.138353][ T31] usb 4-1: can't set config #0, error -71 [ 126.356931][ T31] usb 4-1: USB disconnect, device number 2 [ 129.215364][ T5892] tipc: Failed to remove unknown binding: 66,0,0/0:742981078/742981080 [ 129.215402][ T5892] tipc: Failed to remove unknown binding: 66,0,0/0:742981078/742981079 [ 129.217478][ T5883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.217991][ T5883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.220859][ T5883] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.247560][ T5883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.248095][ T5883] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.372914][ T5892] tipc: Failed to remove unknown binding: 66,0,0/0:742981078/742981080 [ 129.372956][ T5892] tipc: Failed to remove unknown binding: 66,0,0/0:742981078/742981079 [ 131.418812][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.418852][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.418873][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.428983][ T5601] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.429099][ T5601] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.114303][ T5912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.119421][ T5912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.119805][ T5912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.120092][ T5912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.120361][ T5912] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.610071][ T5923] netlink: 92 bytes leftover after parsing attributes in process `syz.3.36'. [ 134.332169][ T5601] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.332214][ T5601] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.332244][ T5601] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.332273][ T5601] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.332353][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 134.411657][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.411754][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.751490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.772875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.783569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.794232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.804936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.815617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.826315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.836987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.847677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.858362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.027768][ T5934] ======================================================= [ 138.027768][ T5934] WARNING: The mand mount option has been deprecated and [ 138.027768][ T5934] and is ignored by this kernel. Remove the mand [ 138.027768][ T5934] option from the mount to silence this warning. [ 138.027768][ T5934] ======================================================= [ 138.032918][ T5934] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 138.436016][ T5942] tipc: Failed to remove unknown binding: 66,0,0/0:2744204390/2744204392 [ 138.436050][ T5942] tipc: Failed to remove unknown binding: 66,0,0/0:2744204390/2744204391 [ 138.437373][ T5942] tipc: Failed to remove unknown binding: 66,0,0/0:2744204390/2744204392 [ 138.437409][ T5942] tipc: Failed to remove unknown binding: 66,0,0/0:2744204390/2744204391 [ 140.645709][ T5950] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.793774][ T5948] binder: BINDER_SET_CONTEXT_MGR already set [ 140.793786][ T5948] binder: 5946:5948 ioctl 4018620d 200000000040 returned -16 [ 140.807261][ T5948] binder: 5946:5948 ioctl c0306201 0 returned -14 [ 141.742312][ T5962] 9p: Bad value for 'wfdno' [ 143.269177][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.478744][ T5817] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 143.478773][ T5817] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 143.575545][ T5817] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 143.575579][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.575600][ T5817] usb 3-1: Product: syz [ 143.575616][ T5817] usb 3-1: Manufacturer: syz [ 143.575632][ T5817] usb 3-1: SerialNumber: syz [ 143.886744][ T5817] usb 3-1: config 0 descriptor?? [ 143.983807][ T5817] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 144.557611][ T5817] gspca_sunplus: reg_r err -110 [ 144.557738][ T5817] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 146.051418][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 146.051496][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.42'. [ 147.273163][ T5973] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.307790][ T5860] usb 3-1: USB disconnect, device number 2 [ 147.468625][ T819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 147.630069][ T819] usb 2-1: Using ep0 maxpacket: 8 [ 147.631853][ T819] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 147.631872][ T819] usb 2-1: config 2 has no interface number 0 [ 147.631905][ T819] usb 2-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.631921][ T819] usb 2-1: config 2 interface 31 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.631938][ T819] usb 2-1: config 2 interface 31 has no altsetting 0 [ 147.634511][ T819] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 147.634531][ T819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.634545][ T819] usb 2-1: Product: syz [ 147.634555][ T819] usb 2-1: Manufacturer: syz [ 147.634566][ T819] usb 2-1: SerialNumber: syz [ 147.666149][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 147.793956][ T819] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 150.347658][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'. [ 150.534449][ T819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 150.832706][ T5722] usb 2-1: USB disconnect, device number 3 [ 150.867299][ T819] usb 1-1: Using ep0 maxpacket: 16 [ 150.892841][ T819] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 150.892872][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.892892][ T819] usb 1-1: Product: syz [ 150.892906][ T819] usb 1-1: Manufacturer: syz [ 150.892920][ T819] usb 1-1: SerialNumber: syz [ 151.509587][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.591753][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.666025][ T819] usb 1-1: config 0 descriptor?? [ 151.667259][ T819] usb 1-1: can't set config #0, error -71 [ 152.030256][ T6022] tipc: Failed to remove unknown binding: 66,0,0/0:86851321/86851323 [ 152.031007][ T6022] tipc: Failed to remove unknown binding: 66,0,0/0:86851321/86851322 [ 152.270064][ T6022] tipc: Failed to remove unknown binding: 66,0,0/0:86851321/86851323 [ 152.270107][ T6022] tipc: Failed to remove unknown binding: 66,0,0/0:86851321/86851322 [ 152.630983][ T819] usb 1-1: USB disconnect, device number 2 [ 156.024382][ T5722] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.100555][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 156.282818][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 156.282842][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 156.354835][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 157.051105][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 161.227212][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 161.227491][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.421090][ T5607] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 162.927477][ T5722] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 164.936292][ T6080] netlink: 'syz.0.79': attribute type 9 has an invalid length. [ 165.730845][ T6083] binder: 6082:6083 ioctl c0306201 0 returned -14 [ 166.040438][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 166.175898][ T5852] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 166.341203][ T5852] usb 2-1: device descriptor read/64, error -71 [ 167.688834][ T5852] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 167.824966][ T5852] usb 2-1: device descriptor read/64, error -71 [ 167.951334][ T5852] usb usb2-port1: attempt power cycle [ 168.318522][ T5852] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 168.341207][ T5852] usb 2-1: device descriptor read/8, error -71 [ 168.594384][ T5852] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 168.830968][ T5852] usb 2-1: device not accepting address 8, error -71 [ 168.831378][ T5852] usb usb2-port1: unable to enumerate USB device [ 169.148824][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.856195][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 170.940496][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'. [ 170.940538][ T6104] netlink: 'syz.3.88': attribute type 7 has an invalid length. [ 170.940553][ T6104] netlink: 'syz.3.88': attribute type 8 has an invalid length. [ 170.940566][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 173.091604][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.108830][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.114330][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.117927][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.965604][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.096868][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.719812][ T6127] tipc: Failed to remove unknown binding: 66,0,0/0:4095848517/4095848519 [ 174.719852][ T6127] tipc: Failed to remove unknown binding: 66,0,0/0:4095848517/4095848518 [ 174.751724][ T6127] tipc: Failed to remove unknown binding: 66,0,0/0:4095848517/4095848519 [ 174.751761][ T6127] tipc: Failed to remove unknown binding: 66,0,0/0:4095848517/4095848518 [ 175.016070][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.587912][ T5611] Bluetooth: hci4: command tx timeout [ 178.339986][ T5597] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 178.631405][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.98'. [ 178.784863][ T5611] Bluetooth: hci4: command tx timeout [ 180.160252][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.001001][ T5611] Bluetooth: hci4: command tx timeout [ 184.138816][ T5611] Bluetooth: hci4: command tx timeout [ 185.049022][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.049894][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.558322][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 186.498630][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.504870][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.586301][ T6178] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 190.811445][ T6178] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 190.811478][ T6178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.811499][ T6178] usb 4-1: Product: syz [ 190.811515][ T6178] usb 4-1: Manufacturer: syz [ 190.811530][ T6178] usb 4-1: SerialNumber: syz [ 190.906608][ T6178] usb 4-1: config 0 descriptor?? [ 191.148327][ T6178] usb 4-1: ignoring: probably an ADSL modem [ 191.154190][ T68] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.155853][ T6211] tipc: Enabling of bearer rejected, failed to enable media [ 191.782654][ T68] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.797617][ T68] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.798570][ T68] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.900038][ T6178] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 193.347856][ T6231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.111'. [ 194.140209][ T6178] usb 4-1: USB disconnect, device number 3 [ 194.293626][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 194.606645][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 194.625535][ T6241] netlink: 'syz.1.114': attribute type 8 has an invalid length. [ 194.625589][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 196.134174][ T66] bridge_slave_1: left allmulticast mode [ 196.134397][ T66] bridge_slave_1: left promiscuous mode [ 196.218056][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.568552][ T66] bridge_slave_0: left allmulticast mode [ 196.568590][ T66] bridge_slave_0: left promiscuous mode [ 196.568846][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.015562][ T6263] netlink: 372 bytes leftover after parsing attributes in process `syz.2.119'. [ 201.254650][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.254723][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.029357][ T6195] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 204.210914][ T6195] usb 3-1: Using ep0 maxpacket: 16 [ 204.216648][ T6195] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 204.216672][ T6195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.216686][ T6195] usb 3-1: Product: syz [ 204.216697][ T6195] usb 3-1: Manufacturer: syz [ 204.216708][ T6195] usb 3-1: SerialNumber: syz [ 204.262793][ T6195] usb 3-1: config 0 descriptor?? [ 204.321242][ T6195] gspca_main: spca508-2.14.0 probing 041e:4018 [ 204.503962][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.521208][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.580335][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.584460][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.992276][ T6195] gspca_spca508: reg_read err -110 [ 205.038401][ T6195] gspca_spca508: reg_read err -32 [ 205.177519][ T5696] IPVS: starting estimator thread 0... [ 205.241923][ T6195] gspca_spca508: reg_read err -32 [ 205.276155][ T6287] IPVS: using max 9 ests per chain, 21600 per kthread [ 206.860537][ T6195] gspca_spca508: reg_read err -32 [ 207.019905][ T6195] gspca_spca508: reg_read err -32 [ 207.020293][ T6195] gspca_spca508: reg write: error -32 [ 207.020358][ T6195] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 207.114167][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.182633][ T5696] usb 3-1: USB disconnect, device number 3 [ 207.222148][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.259822][ T66] bond0 (unregistering): Released all slaves [ 209.835559][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 214.662794][ T6330] capability: warning: `syz.3.135' uses 32-bit capabilities (legacy support in use) [ 215.735937][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 219.558615][ T1002] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 219.576220][ T1002] Bluetooth: hci5: Frame reassembly failed (-84) [ 222.052452][ T5612] Bluetooth: hci5: command 0x1003 tx timeout [ 222.066732][ T5611] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 224.201502][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 224.438365][ T38] audit: type=1326 audit(1777645839.799:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc2c7cdd9 code=0x7fc00000 [ 224.564830][ T6401] netlink: 372 bytes leftover after parsing attributes in process `syz.1.152'. [ 224.917241][ T38] audit: type=1326 audit(1777645840.333:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.3.150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffbc2c7cdd9 code=0x7fc00000 [ 230.160529][ T6414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.160745][ T6414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.160948][ T6414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.161149][ T6414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.161358][ T6414] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 230.161477][ T6414] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 230.245931][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 230.299713][ T6414] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 230.788067][ T6445] netlink: 372 bytes leftover after parsing attributes in process `syz.3.165'. [ 230.950480][ T6449] binder: 6447:6449 ioctl c0306201 0 returned -14 [ 232.519002][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 232.519171][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.519203][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.519230][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.519257][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.281269][ T66] hsr_slave_0: left promiscuous mode [ 233.301046][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'. [ 233.330471][ T66] hsr_slave_1: left promiscuous mode [ 233.361290][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.361493][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.426167][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.426197][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.469340][ T819] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 233.637428][ T819] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 233.637458][ T819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.637478][ T819] usb 5-1: Product: syz [ 233.637492][ T819] usb 5-1: Manufacturer: syz [ 233.637504][ T819] usb 5-1: SerialNumber: syz [ 233.686073][ T819] usb 5-1: config 0 descriptor?? [ 233.906557][ T819] usb 5-1: ignoring: probably an ADSL modem [ 234.202904][ T66] veth1_macvtap: left promiscuous mode [ 234.203198][ T66] veth0_macvtap: left promiscuous mode [ 234.276030][ T66] veth1_vlan: left promiscuous mode [ 234.278398][ T66] veth0_vlan: left promiscuous mode [ 234.313827][ T6488] binder: 6483:6488 ioctl c0306201 0 returned -14 [ 234.336257][ T819] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 234.510308][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.551563][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.566159][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.597642][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.599463][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.689853][ T5611] Bluetooth: hci4: command 0x0c1a tx timeout [ 235.266322][ T5867] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 235.446368][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 235.454200][ T5867] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 235.454649][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.454673][ T5867] usb 4-1: Product: syz [ 235.454687][ T5867] usb 4-1: Manufacturer: syz [ 235.454702][ T5867] usb 4-1: SerialNumber: syz [ 235.524916][ T5867] usb 4-1: config 0 descriptor?? [ 235.569887][ T5867] gspca_main: spca508-2.14.0 probing 041e:4018 [ 235.768479][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.769591][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.782234][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.794274][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.922105][ T5696] IPVS: starting estimator thread 0... [ 236.024626][ T6504] IPVS: using max 8 ests per chain, 19200 per kthread [ 236.024767][ T5867] gspca_spca508: reg_read err -71 [ 236.028879][ T5867] gspca_spca508: reg_read err -71 [ 236.029364][ T5867] gspca_spca508: reg_read err -71 [ 236.029766][ T5867] gspca_spca508: reg_read err -71 [ 236.030169][ T5867] gspca_spca508: reg_read err -71 [ 236.030643][ T5867] gspca_spca508: reg write: error -71 [ 236.030737][ T5867] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 236.164299][ T5867] usb 4-1: USB disconnect, device number 4 [ 236.335169][ T5696] 1024-page vmalloc region starting at 0xffffc9000e9b9000 allocated at kcov_ioctl+0x58/0x640 [ 236.335218][ T5696] list_del corruption. next->prev should be ffffc9001be0c000, but was 0000000000000000. (next=ffffc9000e9b9000) [ 236.337117][ T5696] ------------[ cut here ]------------ [ 236.337125][ T5696] kernel BUG at lib/list_debug.c:67! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.374534][ T5696] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 236.374656][ T5696] CPU: 0 UID: 0 PID: 5696 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 236.374722][ T5696] Hardware name: Google Google Co[ 236.374722][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.374757][ T5696] Workqueue: usb_hub_wq hub_event [ 236.374860][ T5696] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 236.374952][ T5696] Code: ec 93 5f fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d a1 7f fd 49 8b 56 08 48 c7 c7 20 52 a7 8b 48 89 de 4c 89 f1 e8 97 7a 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 236.374998][ T5696] RSP: 0018:ffffc90004acf798 EFLAGS: 00010246 [ 236.375051][ T5696] RAX: 000000000000006d RBX: ffffc9001be0c000 RCX: 9ac11c4c5610e900 [ 236.375087][ T5696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.375120][ T5696] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 236.375154][ T5696] R10: dffffc0000000000 R11: ffffed1017104923 R12: 1ffff92001d37201 [ 236.375200][ T5696] R13: dffffc0000000000 R14: ffffc9000e9b9000 R15: ffffc9000e9b9008 [ 236.375243][ T5696] FS: 0000000000000000(0000) GS:ffff88812617a000(0000) knlGS:0000000000000000 [ 236.375288][ T5696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.375330][ T5696] CR2: 00007ffcbd792e70 CR3: 0000000050880000 CR4: 00000000003526f0 [ 236.375372][ T5696] Call Trace: [ 236.375395][ T5696] [ 236.375419][ T5696] kcov_remote_start+0x2af/0x710 [ 236.375493][ T5696] hub_event+0x150/0x4f60 [ 236.375562][ T5696] ? __lock_acquire+0x6b5/0x2cf0 [ 236.375640][ T5696] ? look_up_lock_class+0x57/0x110 [ 236.375709][ T5696] ? __lock_acquire+0x6b5/0x2cf0 [ 236.375783][ T5696] ? lock_acquire+0x106/0x350 [ 236.375824][ T5696] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 236.375873][ T5696] ? __pfx_hub_event+0x10/0x10 [ 236.375943][ T5696] ? process_scheduled_works+0xa70/0x1860 [ 236.376034][ T5696] ? process_scheduled_works+0xa70/0x1860 [ 236.376091][ T5696] ? process_scheduled_works+0xa70/0x1860 [ 236.376154][ T5696] process_scheduled_works+0xb5d/0x1860 [ 236.376252][ T5696] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.376312][ T5696] ? assign_work+0x3d5/0x5e0 [ 236.376377][ T5696] worker_thread+0xa53/0xfc0 [ 236.376478][ T5696] kthread+0x388/0x470 [ 236.376566][ T5696] ? __pfx_worker_thread+0x10/0x10 [ 236.376622][ T5696] ? __pfx_kthread+0x10/0x10 [ 236.376697][ T5696] ret_from_fork+0x514/0xb70 [ 236.376764][ T5696] ? __pfx_ret_from_fork+0x10/0x10 [ 236.376827][ T5696] ? __switch_to+0xc79/0x1410 [ 236.376915][ T5696] ? __pfx_kthread+0x10/0x10 [ 236.376992][ T5696] ret_from_fork_asm+0x1a/0x30 [ 236.377081][ T5696] [ 236.377102][ T5696] Modules linked in: [ 236.377293][ T5696] ---[ end trace 0000000000000000 ]--- [ 236.414333][ T5696] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 236.414452][ T5696] Code: ec 93 5f fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d a1 7f fd 49 8b 56 08 48 c7 c7 20 52 a7 8b 48 89 de 4c 89 f1 e8 97 7a 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 236.414505][ T5696] RSP: 0018:ffffc90004acf798 EFLAGS: 00010246 [ 236.414561][ T5696] RAX: 000000000000006d RBX: ffffc9001be0c000 RCX: 9ac11c4c5610e900 [ 236.414603][ T5696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.414637][ T5696] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 236.414682][ T5696] R10: dffffc0000000000 R11: ffffed1017104923 R12: 1ffff92001d37201 [ 236.414726][ T5696] R13: dffffc0000000000 R14: ffffc9000e9b9000 R15: ffffc9000e9b9008 [ 236.414777][ T5696] FS: 0000000000000000(0000) GS:ffff88812617a000(0000) knlGS:0000000000000000 [ 236.414824][ T5696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.414860][ T5696] CR2: 00007f52bf1a7e20 CR3: 0000000050882000 CR4: 00000000003526f0 [ 236.414931][ T5696] Kernel panic - not syncing: Fatal exception [ 236.415567][ T5696] Kernel Offset: disabled